6557 matches found
GHSA-256M-J5QW-38F4 Netmaker IDOR Allows User to Update Other User's Password
Impact An IDOR vulnerability was found in the user update function. By specifying another user's username it is possible to update the other user's password. Patches Issue is patched in 0.17.1, and fixed in 0.18.6+. If Users are using 0.17.1, they should run "docker pull gravitl/netmaker:v0.17.1"...
Netmaker IDOR Allows User to Update Other User's Password
Impact An IDOR vulnerability was found in the user update function. By specifying another user's username it is possible to update the other user's password. Patches Issue is patched in 0.17.1, and fixed in 0.18.6+. If Users are using 0.17.1, they should run "docker pull gravitl/netmaker:v0.17.1"...
Hardcoded credentials
Netmaker makes networks with WireGuard. Prior to versions 0.17.1 and 0.18.6, hardcoded DNS key usage has been found in Netmaker allowing unauth users to interact with DNS API endpoints. The issue is patched in 0.17.1 and fixed in 0.18.6. If users are using 0.17.1, they should run docker pull...
Critical Privilege Escalation Vulnerability in Charitable WordPress Plugin Affects Over 10,000 sites
On August 10, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a Privilege Escalation vulnerability in the Donation Forms by Charitable plugin, which is actively installed on more than 10,000 WordPress websites. This vulnerability makes it...
WordPress Charitable Donations Plugin And Fundraising Platform 1.7.0.12 Privilege Escalation
Description: Donation Forms by Charitable = 1.7.0.12 – Unauthenticated Privilege Escalation Affected Plugin: Charitable – Donations Plugin & Fundraising Platform for WordPress Plugin Slug: charitable Affected Versions: = 1.7.0.12 CVE ID: CVE-2023-4404 CVSS Score: 9.8 Critical CVSS...
CVE-2023-3610 affecting package kernel 5.10.185.1-1
CVE-2023-3610 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2023-0615 affecting package kernel 5.10.185.1-1
CVE-2023-0615 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2023-3268 affecting package kernel 5.10.185.1-1
CVE-2023-3268 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2023-28866 affecting package kernel 5.10.185.1-1
CVE-2023-28866 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2022-3606 affecting package kernel 5.10.185.1-1
CVE-2022-3606 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2023-3611 affecting package kernel 5.10.185.1-1
CVE-2023-3611 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2022-3533 affecting package kernel 5.10.185.1-1
CVE-2022-3533 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2023-35828 affecting package kernel 5.10.185.1-1
CVE-2023-35828 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2023-3863 affecting package kernel 5.10.185.1-1
CVE-2023-3863 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2023-1295 affecting package kernel 5.10.185.1-1
CVE-2023-1295 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2022-45888 affecting package kernel 5.10.185.1-1
CVE-2022-45888 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2023-3609 affecting package kernel 5.10.185.1-1
CVE-2023-3609 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2023-3269 affecting package kernel 5.10.185.1-1
CVE-2023-3269 affecting package kernel 5.10.185.1-1. A patched version of the package is available...